Cyber Security Attacks

Front 1

Trusted Computing Base (TCB)

Back 1

The collection of hardware and software that security depends on. Should be as small as possible

Front 2

Message Authentication Codes (MAC)

Back 2

Short piece of info to authenticate a message and provide integrity insurance

Hint 2

Allows verifiers (who possess the secret key) to detect changes to the message content

Front 3

Logic of Authorization

Back 3

The proofs that we did in class

Front 4

Hash Function

Back 4

Any algorithm that maps data of variable length to data of a fixed length

Front 5

PreImage Resistance

Back 5

Given a hash h it should be difficult to find any message m such that h=hash(m)

Front 6

2nd PreImage Resistance

Back 6

Given an input m1 it should be difficult to find another input m2 such that m1 and m2 are not equal but hash(m1) = hash(m2)

Hint 6

Functions that lack this property are vulnerable to second preimage attacks

Front 7

Collision Resistance

Back 7

Should be difficult to find two different messages m1 and m2 such that hash(m1) = hash(m2). A pair is called a cryptographic hash collision

Hint 7

Requires a hash value twice as long as what is required in preimage resistance

Front 8

Access Control List

Back 8

List of permissions attached to an object, specifies which users are granted access, or what operations are allowed on given objects

Front 9

Reference Monitor

Back 9

Defines a set of design requirements, enforces users and processors ability to perform operations (read or write files for example)

Front 10

Trusted Computing Group

Back 10

Initiative to implement Trusted Computing

Hint 10

Included with computers to make them trustworthy

Front 11

Cryptographic Hash Function

Back 11

Hash function that takes an arbitrary block of data and returns a fixed size bit string (the cryptographic hash value) so that any change to the data will change the hash value

Front 12

4 properties of a good Hash Function

Back 12

Easy to compute hash value for any message, infeasible to generate a message that has a given hash, infeasible to modify a message without changing the hash, can't find two messages with the same hash

Front 13

Trusted Platform Module

Back 13

Offers secure generation of cryptographic keys, random number generator, sealed storage

Front 14

Trusted Computing

Back 14

Computer behaves in expected ways enforced by computer hardware and software.

Hint 14

This is done by loading the hardware with a unique encription key innaccessable to the rest of the system

Front 15

Sealed Storage

Back 15

Generates keys based on identiy of software requesting to use them and identity of the computer on which the software is running

Hint 15

Keys can be generated whenever they are needed, other computers or users cannot unseal the data

Front 16

One-Way Function

Back 16

is a function that is easy to compute on every input, but hard to invert given the image of a random input.

Front 17

Border Gateway Protocol (BGP)

Back 17

Autonomous System (AS) has border routers that 'speak' BGP with BGP peers at border routers in neighboring AS

Hint 17

AS's that send traffic to each other have a BGP session using TCP to communicate info creates global connectivity

Front 18

False Path Attack

Back 18

AS 4 wants to draw traffic from AS2 to announces a shorter path to IP prefix X,

Front 19

False Origin Attack

Back 19

Address Spacke Hijacking - AS 1 annunces a false advertisement for IP prefix X.

Front 20

Resource Public Key Infrastructure

Back 20

How we determine ownership of IP address and Autonomous System (AS) numbers

Hint 20

Can sign things to prevent false origin or path attacks